Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94a71beb-92b2-3822-9464-914617130edd.roa
File:                     94a71beb-92b2-3822-9464-914617130edd.roa (raw, json)
Hash identifier:          PB0n5bXu/lULdL6wmpG/JQ2s56GoI/rlni417bqLjHo=
Subject key identifier:   EC:E2:B6:13:8F:1F:4B:5E:85:93:AC:0B:87:63:41:C5:21:18:09:1E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA234E16F0CB3C44286368
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94a71beb-92b2-3822-9464-914617130edd.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        172.252.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:23:4e:16:f0:cb:3c:44:28:63:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=393ba33b-0268-4534-9301-8b785782cca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:cd:c1:af:17:ee:76:e6:d0:c4:a5:f9:37:
                    f0:ec:ed:72:13:a8:1a:4a:40:80:c4:f1:cd:08:2b:
                    07:ee:b0:aa:b3:d0:5d:c0:35:da:73:5f:7e:32:84:
                    86:e1:ae:8d:27:3b:19:6c:ef:76:6e:18:ab:14:02:
                    60:bf:7f:0b:20:37:ab:bc:3c:6c:5b:d0:2a:c0:e2:
                    4a:ca:67:e7:43:34:ca:e7:25:1f:69:81:c9:b1:13:
                    a1:0a:f1:59:7b:85:ae:e5:cf:71:f5:f6:6a:cf:4a:
                    d3:0c:8d:96:c9:01:53:b5:b1:bb:b8:be:b5:62:64:
                    8a:c8:2e:b9:62:3e:67:83:45:fb:99:38:23:47:b1:
                    67:0a:d5:9e:b4:b5:9d:68:3e:5c:55:5a:45:96:81:
                    e8:c3:4f:6a:b8:b9:02:49:01:f3:fb:fa:54:1f:81:
                    4b:8a:de:ae:c6:d4:80:8b:f8:e2:ab:d8:97:7e:31:
                    3d:71:e5:27:a0:2c:85:5e:f1:7f:bf:c3:e8:d5:40:
                    eb:c1:90:10:f2:df:44:0d:24:f1:71:fb:eb:b0:e1:
                    76:22:35:a0:bd:c7:71:4a:00:d2:ef:ad:43:52:c2:
                    72:fb:e1:92:80:4c:87:af:72:8f:53:9e:7a:a4:1a:
                    0c:c6:95:5d:8c:00:76:be:e7:f2:00:90:dd:9a:e0:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:B6:13:8F:1F:4B:5E:85:93:AC:0B:87:63:41:C5:21:18:09:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94a71beb-92b2-3822-9464-914617130edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:83:7e:1b:ad:8a:d1:16:75:48:52:ab:17:f1:7e:cb:ab:
         50:c3:e2:ad:dc:d9:8d:78:6c:76:18:dc:c9:71:1f:d0:0b:47:
         db:9c:24:ba:f4:ef:a0:44:33:26:d9:0a:d7:f3:1a:dc:af:71:
         06:1e:ac:9e:05:32:f4:eb:10:7e:9f:84:f4:5a:14:eb:45:3f:
         91:9b:49:2b:db:d8:e9:1f:d8:78:95:47:b9:31:18:c6:5c:dd:
         6d:c7:95:c9:67:3a:a7:55:80:46:f4:03:86:c6:31:eb:6f:7b:
         63:03:b5:d5:83:51:b3:6a:1e:8b:79:64:14:3a:60:9b:f9:4b:
         bd:fd:4e:35:71:fc:63:9a:3e:c4:8a:e9:e3:b0:d4:e0:c5:95:
         66:5d:fe:72:1f:e4:c1:15:fd:96:5c:2b:a8:97:5d:d9:9e:9c:
         2b:e9:5d:14:f3:b0:34:5a:62:ac:a6:a9:52:e1:c3:c6:63:12:
         f0:5c:91:39:2e:30:e8:cf:be:36:f8:fd:33:10:f4:52:d9:67:
         4d:8b:fe:69:17:1b:8c:8a:3c:2c:4e:cf:fc:49:60:90:18:2f:
         c8:d4:13:0c:2f:5b:47:9a:b7:97:3e:bc:59:7d:7e:53:0b:f6:
         33:3c:55:91:ba:dd:05:e5:72:92:64:5b:01:82:5a:c6:4f:da:
         96:bd:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:57 2026 by rpki-client